From 7b298ac8a32ac2a6ada8caae2780d5b3e7e346f9 Mon Sep 17 00:00:00 2001
From: Jean-Pierre PRUNARET <jean-pierre+git@prunetwork.fr>
Date: Mon, 15 Aug 2016 16:14:06 +0200
Subject: [PATCH] =?UTF-8?q?activation=20r=C3=A8gle=20ssh-iptable?=
MIME-Version: 1.0
Content-Type: text/plain; charset=UTF-8
Content-Transfer-Encoding: 8bit

---
 base/activation-manuelle/service-fail2ban.nix | 3 +++
 1 file changed, 3 insertions(+)

diff --git a/base/activation-manuelle/service-fail2ban.nix b/base/activation-manuelle/service-fail2ban.nix
index 854210d..e103025 100644
--- a/base/activation-manuelle/service-fail2ban.nix
+++ b/base/activation-manuelle/service-fail2ban.nix
@@ -39,4 +39,7 @@ mkIf cfg.fail2ban {
       };
     };
   };
+
+  # https://github.com/NixOS/nixpkgs/issues/8437
+  services.fail2ban.jails.ssh-iptables = "enabled = true";
 }